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Abstract:- High Throughput Satellites (HTS) are built in 
ISRO with new technological elements and advanced 
features. These advanced features are implemented with 
intelligence of auto system reconfiguration and this 
reduces manual intervention in spacecraft operations from 
ground stations. 

Checkout team has major contribution in realising the 
spacecraft in terms of testing. Checkout team participate 
right from design review of subsystem till launch. 
Responsibility of Checkout includes study of spacecraft 
configuration, preparation of test plan and procedures, 
execution of test procedures during various test phases 
and generation of Anomaly Report if any deviation is 
observed in spacecraft performance. 

This paper briefs on the advanced features available in 
HTS, contribution of Checkout Team in generation of test 
plan and procedure for these features and execution of test 
during various 1ST (Integrated Satellite Test) phases on 
ground. 
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1 Introduction 

HTS are classification of satellites used mainly to provide 
high-speed internet connectivity. HTS applies frequency reuse 
technique, which enables the satellite to provide service to 
more users, generally more than double, compared to present 
communication satellites, with the available bandwidth. Thus 
the cost per bit will be reduced. HTS also provides internet 
service to remote areas where terrestrial link is not reachable. 

HTS are built with new technological elements and advanced 
features. To meet the advanced features implemented onboard, 
lot of auto reconfiguration features and onboard intelligence 
are built in these spacecrafts. All these features need to be 
thoroughly tested on ground before clearing the spacecraft for 
shipment to Launch. 

1.1 Checkout: Spacecraft Testing is a major part in spacecraft 
realization. Checkout team is involved in spacecraft 


realization from design review of sub-system till spacecraft 
Launch. We, the Checkout Team, are responsible for study of 
spacecraft configuration, planning, preparation and execution 
of tests for all the subsystems of spacecraft. 

1.2 Preparation phase includes readiness of Hardware and 
Software for testing the spacecraft. Hardware includes Power 
simulators, Stimuli generators, Telecommand transmission 
system, Telemetry reception system and Payload test system. 

Software for spacecraft testing resides in checkout server 
which controls all the ground support equipment. Test 
sequencer is a task of the checkout software through which all 
prepared test procedures are sequenced and executed in form 
of Telecommand. Checkout software also processes the 
acquired telemetry data and displays it in various formats for 
monitoring and data analysis in real time and offline. 

Checkout test system, both hardware and software, has built in 
safety features to avoid manual errors during spacecraft 
testing. 

As part of preparation phase, Telemetry & Telecommand 
database and test procedures for all the subsystems will be 
made available in checkout server well before the start of 1ST. 

1.3 Execution phase: This is nothing but 1ST phase where the 
test procedures are executed through test sequencer based on 
the 1ST phase. This also includes generation of Anomaly 
reports whenever any performance deviation is observed in 
spacecraft during 1ST. 

Test plan and procedures are prepared to test the functionality 
of each subsystem and the interface between the subsystems. 
Exhaustive testing of the spacecraft is carried out during Dis- 
Assembled 1ST, Assembled 1ST, Thermovac 1ST, Dynamic 
1ST, CATF, Pre-shipment and Launch base. Contribution 
from Checkout team will be from Dis-assembled 1ST to 
Launch. Tests are repeated during different 1ST phases, as the 
environment is different during each phase. 

2 Advanced Features 

Some of the Advanced Features [1] available in HTS are as 
follows: 

a. Attitude Recovery Logic. In case of non-nominal 
attitude, this logic prevents activation of safe mode and 
takes action to restore nominal earth pointing. 

b. FDIR : Fault Detection Isolation and Reconfiguration. 


978-1 -5386-1974-2/18/$31.00 ©2018 IEEE 


1959 



Proceedings of the 2nd International Conference on Inventive Communication and Computational Technologies (ICICCT 2018) 
IEEE Xplore Compliant - Part Number: CFP18BAC-ART; ISBN:978-l-5386-1974-2 


This logic Isolates the Faulty system and configures the 
system preselected for FDIR operation to ensure 
minimum disturbance on bus system. There are many 
FDIRs available to take care of each subsystem. 

c. Safe Mode : This logic brings spacecraft to minimum 
load condition and further configuration is 
programmable. 

d. ESR: Emergency Sun Re-acquisition logic puts 
spacecraft in power safe mode on occurrence of safe 
mode. 

This paper focuses on the test carried out for two of such 
advanced features. 

3 Wheel FDIR 

A brief introduction on the system and terminologies involved 
in Wheel FDIR are as follows: 

3.1 AOCE: Attitude orbit and Control Electronics takes inputs 
from all the available sensors, processes the sensor 
information as per the selected mode of operation and drives 
the actuators to maintain three axis stabilization. 

3.2 Wheels: Spacecraft has 3 Wheels (Whl, Wh2, Wh3) and 
are powered ON individually in a predefined sequence. 

At any given time only two wheels are operated and hence we 
have 3 modes of Wheels Operation. 

3.3 Events: There are multiple Events available in AOCE 
where each Event is identified for a particular function. For 
each event, set of commands can be pre-loaded in TCP which 
gets executed when the event is triggered. 

Example: Two number of events are predefined for Whl 
FDIR. When Whl goes off spuriously those two events are 
triggered (if Wheel FDIR logic is enabled) and executes the 
preloaded commands. 

3.4 TCP: TCP is a Tele-command Processor where the 
commands are stored and get executed. TCP software supports 
loading of huge number of commands in TT-memory (TT- 
Time Tagged) for all the available Events. TCP has Autonomy 
Logic which has to be enabled to uplink commands in this 
memory location. 

TCP has the facility to queue up to maximum number of 
available events. 

Spacecraft operator is responsible for programming required 
commands in TCP and mapping the number of commands and 
memory index to Event. 

On detection of any onboard Event (Example: Whl Off), the 
information from AOCE is passed on to TCP, via Mil Std 
1553 interface, as Event Number. On receiving the Event 
number, commands are executed from the corresponding 
memory location of TCP. 


3.5 Checkout Testing: 

Test Procedure for Wheel FDIR is prepared at Checkout by 
checkout team after studying the subsystem configuration in 
detail. Multiple subsystems like AOCE, Wheels and TCP are 
involved in Wheel FDIR. Checkout team need to understand 
the sequence involved in each subsystem for the test to 
prepare the test procedure. The prepared test procedures 
should be complete in verifying all the hardware and software 
interface between the subsystems. 

Test procedures are prepared using Checkout Command 
Language (CCL). Reference [5] will provide the insight on 
CCL. The procedure is validated for syntax and stored in test 
folder in Checkout server. 

3.5.1 TCP Configuration: 

a. Enable Autonomy Logic of TCP. 

b. Uplink the commands required for Whl FDIR in TT 
Memory, All the commands are loaded with required 
differential delay. 

c. Map the commands and their location index to the 
Onboard Event. 

3.5.2 AOCE-Wheel Configuration: 

a. Whl and Wh2 wheels are made ON in Wheel Mode-1. 
Once Wheel mode-1 is selected, Onboard will monitor 
Whl and Wh2 status alone to trigger Wheel FDIR[2]. 

b. Ensure spacecraft is configured suitably for carrying out 
the Whl FDIR test. 

c. Enable Wheel FDIR Logic. 

3.5.3 Test Sequence: 

a. Ensure all the commands are uplinked and satellite is 
ready for Wheel FDIR testing. 

b. Ensure the test is not affecting any other parallel test 
being carried out. 

c. Issue Whl off command.(simulating Spurious off for 
Whl) 

3.5.4 Result: 

a. Whl should go Off initially. 

b. Since Wheel FDIR is enabled, the corresponding events 
are expected to trigger in sequence and Whl should 
come ON at the end. 

c. Operator should ensure the preloaded commands for the 
intended events alone are executed. The checklist for the 
same will already be implemented in test procedure in 
terms of telemetry check against the expected value. 
Any deviation in the check should be addressed 
immediately and the reason should be ascertained. 

d. Test is declared successful if the results are as expected. 

e. Operator should also ensure that no other spacecraft 
parameters are affected. 

Though these features are tested at subsystem level, it is 
necessary to carry out the test at Integrated Spacecraft level. 
Because subsystem level tests qualifies only the individual 
subsystem. Integrated test carried out at Checkout can only 
verify the interface between subsystems. 
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4 SADA-FDL: 

4.1 SAD A: Solar Array Drive Assembly [4] 

.SADA consists of two packages namely Solar Array Drive 
Mechanism (SADM) and Solar Array Drive Electronics 
(SADE). HTS has two SADA: One for north Solar Panel and 
one for south Solar Panel. Each SADA has two electronics: 
main and redundant. 

SADA drives the solar panel for maximum power generation 
based on the error from Solar Panel Sun Sensor (SPSS) 

SPSS: On each solar Panel two SPSS are mounted to provide 
the error in terms of sun angle with respect to Panel. Zero 
error if Panel is perpendicular to the sun. SADA Electronics 
processes the errors of SPSS on the respective panels. 

4.2 SADA Modes: 

SADA Electronics can operate in open loop or Close loop 
mode. 

Open Loop : SADA rotation is independent of SPSS error. 
Panel rotates at the programmed open loop rate. 

Closed Loop: SADA rotation is based on SPSS error 
magnitude and direction. 

Fault Detection Logic (FDL) is one of the advanced features 
of SADA. 

4.3 FDL: Fault Detection Logic 

Whenever SPSS error is greater than 20° for more than 3 
minutes and if FDL Logic is enabled, then the Logic triggers 
an Onboard Event, which in turn executes set of preloaded 
commands from TCP. 

Example: If North SADA Main Electronics is ON, and North 
SADA Redundant Electronics is preselected for FDL, FDL 
logic triggers the event corresponding to North SADA Main 
Electronics and the following commands are executed, which 
are preloaded for SADA reconfiguration: 

a. Switch OFF North SADA Main Electronics 

b. Switch ON North SADA Redundant electronics 

c. Initialize MIL 1553 logics for Redundant electronics 

d. Select required mode for SADA operation. 

e. Enable the Rotation for SADA. 

4.4 Checkout Testing: 

Test Case: North SADA Main Electronics FDL 

This test is carried out when Solar Panels are not connected to 
SADA. In this test SADA rotates with the simulated error but 
the error will not converge as the solar panels are not 
connected. Hence the simulated error remains and the logic 
triggers the event. 

4.4.1 TCP Configuration: 

a. Enable AOCE Autonomy Logic of TCP. 

b. Uplink commands in TT Memory, the commands 
required for the SADA FDL. 

c. Map the commands and their location index to the 
Onboard Event. 


4.4.2 SADA Configuration: 

a. Switch ON North SADA Main Electronics and 
Configure SADA in Close loop mode. 

b. Enable FDL Logic and Preselect North SADA 
Redundant Electronics for FDL. 

4.4.3 Test Sequence: 

a. Simulate North SPSS error of 20° for more than 3 
minutes. 

Error for SPSS is simulated with Stimuli generator available at 
Checkout. By setting the required current for the optical 
stimuli, the required SPSS error can be achieved. Current limit 
for this stimuli is set in checkout hardware as well as software 
to prevent any operational mistakes. 

4.4.4 Result: 

a. North SADA Main Electronics should go Off. 

b. North SADA Redundant Electronics should come ON. 

c. Ensure all the preloaded commands are executed. 

d. Run the checklist to verify the occurance of expected 
changes. 

e. Test is declared successful if the results are as expected. 

f. Operator should also ensure that no other spacecraft 
parameters are affected. 

5 RT Simulation 

HTS implements Mil Std 1553 interface for the subsystems 
which reduces the mass of spacecraft harness significantly. 

1553 Bus monitoring system of Checkout is plugged into 
spacecraft 1553 Bus through a coupler, to monitor the bus 
transactions. Other than the Telemetry data, bus monitoring 
data is also acquired and stored in checkout server. This data 
provides finer details for analysis if any deviation is observed 
in spacecraft performance during testing. 

Verification of the checkout server interface with 1553 bus 
monitoring system is also part of the preparation phase. 

Mil Std 1553 interface has the concept of BC (Bus Controller) 
and RT (Remote Terminal). AOCE is Bus controller and other 
subsystems are RT. 

If any subsystem is not available during initial phases of 1ST, 
this 1553 Bus monitoring system enables us to even simulate 
that particular subsystem. This is done by programming the 
RT address corresponding to the subsystem with the required 
data in the 1553 Bus monitoring system. Hence we call our 
Checkout 1553 Bus monitoring system as GC-RT. It serves as 
bus monitor and RT. 

Example : During Safe mode test, Software safe mode is 
activated when DTG (Dynamically Tuned Gyros) rates 
(angular velocity) are more than a specific number. Even if 
DTGs are available, it is not possible to bring the required 
rates for carrying out the test. 

Hence DTGs are made Off. DTG rates are simulated from 
GC-RT. RT address of DTG , sub address for rates and value 
to be programmed for simulating the rates will be known to 


978-1-5386-1974-2/18/$31.00 ©2018 IEEE 


1961 



Proceedings of the 2nd International Conference on Inventive Communication and Computational Technologies (ICICCT 2018) 
IEEE Xplore Compliant - Part Number: CFP18BAC-ART; ISBN:978-l-5386-1974-2 


the operator. Hence the operator will program the GC-RT 
accordingly to simulate the required rates. 

Thus GC-RT helps to simulate a subsystem which is 
unavailable and clears it external interfaces with other 
available subsystems. 

6 Conclusion 

Detailed testing of Wheel FDIR, SADA FDL and other 
advanced features is carried out at Checkout, which helps to 
capture the anomaly at an early stage of checkout activities. 
That is during disassembled integrated spacecraft testing. This 
would help spacecraft operator to prepare and program the 
sequence for Onboard events and to manage the spacecraft in 
orbit without any surprises. 


Acknowledgments 

We, the authors, like to thank Dr. V.K Hariharan, Deputy 
Director - Integration and Checkout Area, for encouraging us 
to write this paper. We are also thankful to our entire satellite 
checkout team for their suggestions and support in terms of 
preparation and execution of test procedure during various 
stages of satellite testing. 

References 

[ 1 ] Critical Design Review Document of AOCE 

[2] Software Requirements Specification for AOCE. 

[3] TCP Software User’s Manual 

[4] Critical Design Review Document on FPGA Based SADA Electronics 
with MIL-STD-1553B Interface. 

[5] CCL: A Test Language for Automating Spacecraft Checkout Operations 


978-1-5386-1974-2/18/$31.00 ©2018 IEEE 


1962 



